@thunderid/react 1.14.0 → 1.15.0

package/dist/components/management/shared/formatTimestamp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatTimestamp.js","names":["date: Date"],"sources":["../../../../src/components/management/shared/formatTimestamp.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Formats an ISO timestamp for display in the user's locale, leaving it as it is when it cannot be read.\n *\n * @param value - The timestamp.\n * @returns The formatted timestamp, or `undefined` when there is none.\n */\nconst formatTimestamp = (value?: string): string | undefined => {\n  if (!value) {\n    return undefined;\n  }\n\n  const date: Date = new Date(value);\n\n  return Number.isNaN(date.getTime()) ? value : date.toLocaleString();\n};\n\nexport default formatTimestamp;\n"],"mappings":";;;;;;;AASA,MAAM,mBAAmB,UAAuC;AAC9D,KAAI,CAAC,MACH;CAGF,MAAMA,OAAa,IAAI,KAAK,MAAM;AAElC,QAAO,OAAO,MAAM,KAAK,SAAS,CAAC,GAAG,QAAQ,KAAK,gBAAgB;;AAGrE,8BAAe"}

package/dist/components/management/shared/useAdminPartStyles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAdminPartStyles.d.ts","sourceRoot":"","sources":["../../../../src/components/management/shared/useAdminPartStyles.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,QAAA,MAAM,kBAAkB,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAInD,CAAC;AAEF,eAAe,kBAAkB,CAAC"}

package/dist/components/{admin → management}/shared/useAdminPartStyles.js

@@ -1,7 +1,7 @@
 import useTheme_default from "../../../contexts/Theme/useTheme.js";
 import AdminParts_styles_default from "./AdminParts.styles.js";
 
-//#region src/components/admin/shared/useAdminPartStyles.ts
+//#region src/components/management/shared/useAdminPartStyles.ts
 /**
 * Returns the shared admin part styles for the active theme.
 *

package/dist/components/management/shared/useAdminPartStyles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAdminPartStyles.js","names":["useTheme","useStyles"],"sources":["../../../../src/components/management/shared/useAdminPartStyles.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport useStyles from './AdminParts.styles';\nimport useTheme from '../../../contexts/Theme/useTheme';\n\n/**\n * Returns the shared admin part styles for the active theme.\n *\n * @returns The CSS class names of the admin parts.\n */\nconst useAdminPartStyles = (): Record<string, string> => {\n  const {theme, colorScheme} = useTheme();\n\n  return useStyles(theme, colorScheme);\n};\n\nexport default useAdminPartStyles;\n"],"mappings":";;;;;;;;;AAWA,MAAM,2BAAmD;CACvD,MAAM,EAAC,OAAO,gBAAeA,kBAAU;AAEvC,QAAOC,0BAAU,OAAO,YAAY;;AAGtC,iCAAe"}

package/dist/components/management/shared/useDefaultOuId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDefaultOuId.d.ts","sourceRoot":"","sources":["../../../../src/components/management/shared/useDefaultOuId.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,QAAA,MAAM,cAAc,GAAI,OAAO,MAAM,KAAG,MAAM,GAAG,SAMhD,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/components/{admin → management}/shared/useDefaultOuId.js

@@ -1,6 +1,6 @@
 import useUser_default from "../../../contexts/User/useUser.js";
 
-//#region src/components/admin/shared/useDefaultOuId.ts
+//#region src/components/management/shared/useDefaultOuId.ts
 /**
 * Resolves the organization unit a new resource is created in: the one passed in, otherwise the
 * signed-in user's own organization unit.

package/dist/components/management/shared/useDefaultOuId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDefaultOuId.js","names":["useUser","fromProfile: unknown"],"sources":["../../../../src/components/management/shared/useDefaultOuId.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport useUser from '../../../contexts/User/useUser';\n\n/**\n * Resolves the organization unit a new resource is created in: the one passed in, otherwise the\n * signed-in user's own organization unit.\n *\n * @param ouId - The organization unit chosen by the caller.\n * @returns The organization unit identifier, or `undefined` when neither is known.\n */\nconst useDefaultOuId = (ouId?: string): string | undefined => {\n  const {profile, flattenedProfile} = useUser();\n  const source: Record<string, unknown> = (flattenedProfile ?? profile ?? {}) as Record<string, unknown>;\n  const fromProfile: unknown = source['ouId'];\n\n  return ouId ?? (typeof fromProfile === 'string' ? fromProfile : undefined);\n};\n\nexport default useDefaultOuId;\n"],"mappings":";;;;;;;;;;AAYA,MAAM,kBAAkB,SAAsC;CAC5D,MAAM,EAAC,SAAS,qBAAoBA,iBAAS;CAE7C,MAAMC,eADmC,oBAAoB,WAAW,EAAE,EACtC;AAEpC,QAAO,SAAS,OAAO,gBAAgB,WAAW,cAAc;;AAGlE,6BAAe"}

package/dist/components/management/shared/useProjectPlacement.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Where a new application or agent is placed, the two resources the server lets an app place by
+ * project.
+ */
+export interface ProjectPlacement {
+    /**
+     * The organization unit, when the app passed one or no project is chosen.
+     */
+    ouId?: string;
+    /**
+     * The current project, when one is chosen and the app passed no organization unit. The server
+     * places the resource in the project's root organization unit.
+     */
+    projectId?: string;
+}
+/**
+ * Resolves where a new application or agent is created: the organization unit passed in, otherwise the
+ * current project (see `ProjectSwitcher`), otherwise the signed-in user's own organization unit. A
+ * project's identifier is not an organization unit's, so it is sent as `projectId`, never as `ouId`.
+ *
+ * @param ouId - The organization unit chosen by the caller.
+ * @returns The placement, empty when nothing is known.
+ */
+declare const useProjectPlacement: (ouId?: string) => ProjectPlacement;
+export default useProjectPlacement;
+//# sourceMappingURL=useProjectPlacement.d.ts.map

package/dist/components/management/shared/useProjectPlacement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useProjectPlacement.d.ts","sourceRoot":"","sources":["../../../../src/components/management/shared/useProjectPlacement.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,QAAA,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,gBAS5C,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/components/management/shared/useProjectPlacement.js

@@ -0,0 +1,23 @@
+import useThunderID_default from "../../../contexts/ThunderID/useThunderID.js";
+import useDefaultOuId_default from "./useDefaultOuId.js";
+
+//#region src/components/management/shared/useProjectPlacement.ts
+/**
+* Resolves where a new application or agent is created: the organization unit passed in, otherwise the
+* current project (see `ProjectSwitcher`), otherwise the signed-in user's own organization unit. A
+* project's identifier is not an organization unit's, so it is sent as `projectId`, never as `ouId`.
+*
+* @param ouId - The organization unit chosen by the caller.
+* @returns The placement, empty when nothing is known.
+*/
+const useProjectPlacement = (ouId) => {
+	const { currentProject } = useThunderID_default();
+	const defaultOuId = useDefaultOuId_default(ouId);
+	if (!ouId && currentProject?.id) return { projectId: currentProject.id };
+	return defaultOuId ? { ouId: defaultOuId } : {};
+};
+var useProjectPlacement_default = useProjectPlacement;
+
+//#endregion
+export { useProjectPlacement_default as default };
+//# sourceMappingURL=useProjectPlacement.js.map

package/dist/components/management/shared/useProjectPlacement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useProjectPlacement.js","names":["useThunderID","defaultOuId: string | undefined","useDefaultOuId"],"sources":["../../../../src/components/management/shared/useProjectPlacement.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport useDefaultOuId from './useDefaultOuId';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\n/**\n * Where a new application or agent is placed, the two resources the server lets an app place by\n * project.\n */\nexport interface ProjectPlacement {\n  /**\n   * The organization unit, when the app passed one or no project is chosen.\n   */\n  ouId?: string;\n  /**\n   * The current project, when one is chosen and the app passed no organization unit. The server\n   * places the resource in the project's root organization unit.\n   */\n  projectId?: string;\n}\n\n/**\n * Resolves where a new application or agent is created: the organization unit passed in, otherwise the\n * current project (see `ProjectSwitcher`), otherwise the signed-in user's own organization unit. A\n * project's identifier is not an organization unit's, so it is sent as `projectId`, never as `ouId`.\n *\n * @param ouId - The organization unit chosen by the caller.\n * @returns The placement, empty when nothing is known.\n */\nconst useProjectPlacement = (ouId?: string): ProjectPlacement => {\n  const {currentProject} = useThunderID();\n  const defaultOuId: string | undefined = useDefaultOuId(ouId);\n\n  if (!ouId && currentProject?.id) {\n    return {projectId: currentProject.id};\n  }\n\n  return defaultOuId ? {ouId: defaultOuId} : {};\n};\n\nexport default useProjectPlacement;\n"],"mappings":";;;;;;;;;;;;AA8BA,MAAM,uBAAuB,SAAoC;CAC/D,MAAM,EAAC,mBAAkBA,sBAAc;CACvC,MAAMC,cAAkCC,uBAAe,KAAK;AAE5D,KAAI,CAAC,QAAQ,gBAAgB,GAC3B,QAAO,EAAC,WAAW,eAAe,IAAG;AAGvC,QAAO,cAAc,EAAC,MAAM,aAAY,GAAG,EAAE;;AAG/C,kCAAe"}

package/dist/contexts/ThunderID/ThunderIDContext.d.ts

@@ -1,4 +1,4 @@
-import { ResourceInvalidator, ApiFetcher, EmbeddedRecoveryFlowRequest, EmbeddedRecoveryFlowResponse, FlowMetadataResponse, HttpRequestConfig, HttpResponse, IdToken, OIDCDiscoveryApiResponse, SignInOptions, StorageManager, TokenExchangeRequestConfig, TokenResponse, AttributeSchema } from '@thunderid/browser';
+import { ResourceInvalidator, ApiFetcher, EmbeddedRecoveryFlowRequest, EmbeddedRecoveryFlowResponse, FlowMetadataResponse, HttpRequestConfig, HttpResponse, IdToken, OIDCDiscoveryApiResponse, SignInOptions, StorageManager, TokenExchangeRequestConfig, TokenResponse, AttributeSchema, CurrentOrganizationUnit, Project, SwitchOrganizationUnitOptions, User } from '@thunderid/browser';
 import { Context } from 'react';
 import { ThunderIDReactConfig } from '../../models/config';
 import ThunderIDReactClient from '../../ThunderIDReactClient';
@@ -14,6 +14,32 @@ export type ThunderIDContextProps = {
      */
     baseUrl: string | undefined;
     clientId: string | undefined;
+    /**
+     * The organization unit the signed-in session was issued for, from its `ouId`, `ouHandle` and
+     * `ouName` claims, or `null`. For display only, never for an authorization decision.
+     */
+    currentOrganizationUnit: CurrentOrganizationUnit | null;
+    /**
+     * The project the user chose for the management UI, for example with `ProjectSwitcher`, or `null`.
+     * It is client-side context, not a sign-in: tokens and permissions do not change with it.
+     * `ApplicationList`, `AgentList`, `ApplicationCreate` and `AgentCreate` send it as `projectId`.
+     */
+    currentProject: Project | null;
+    /**
+     * Chooses the current project, or clears it with `null`. Kept per vendor in `localStorage`.
+     */
+    setCurrentProject: (project: Project | null) => void;
+    /**
+     * Reads the current organization unit from the session's claims. For display only.
+     */
+    getCurrentOrganizationUnit: () => Promise<CurrentOrganizationUnit | null>;
+    /**
+     * Signs in again bounded to the organization unit `organizationUnitId`, replacing the session on
+     * success and refreshing the user. A failed switch keeps the previous session and rejects with an
+     * error whose code is one of `OrganizationUnitSwitchErrorCodes`. In redirect mode the page may leave
+     * for the unit's authorization endpoint, and the promise then resolves with `undefined`.
+     */
+    switchOrganizationUnit: (organizationUnitId: string, options?: SwitchOrganizationUnitOptions) => Promise<User | undefined>;
     /**
      * Optional endpoint URL overrides from the client config. Used to resolve resource-server
      * endpoints (e.g. flow/user-management) independently of `baseUrl` — see `resolveResourceEndpoint`.

package/dist/contexts/ThunderID/ThunderIDContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDContext.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDContext.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,mBAAmB,EAEnB,UAAU,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,wBAAwB,EACxB,aAAa,EACb,cAAc,EACd,0BAA0B,EAC1B,aAAa,EAEb,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,OAAO,EAAgB,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AACzD,OAAO,oBAAoB,MAAM,4BAA4B,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;OAGG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;;OAGG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9C,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,SAAS,EAAE;QACT;;;;WAIG;QACH,SAAS,EAAE,wBAAwB,GAAG,IAAI,CAAC;KAC5C,CAAC;IACF;;;;OAIG;IACH,aAAa,EAAE,CAAC,MAAM,EAAE,0BAA0B,KAAK,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC;IACzF;;;;;OAKG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,iBAAiB,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E;;;;OAIG;IACH,IAAI,EAAE;QACJ;;;WAGG;QACH,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB;;;;WAIG;QACH,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E;;;;WAIG;QACH,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACpF,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;;OAGG;IACH,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAElC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC;;;;;;;;OAQG;IACH,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;OAEG;IACH,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,2BAA2B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAE1F;;;;;;;;;;;OAWG;IACH,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;IAElE;;;;OAIG;IACH,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IAEF;;;OAGG;IACH,cAAc,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAEvD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;OAIG;IACH,OAAO,EAAE,GAAG,CAAC;IAEb;;;OAGG;IACH,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,IAAI,EAAE,GAAG,CAAC;IAEV;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAC;IAEnD;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;AAE/C;;GAEG;AACH,QAAA,MAAM,gBAAgB,EAAE,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAyC1D,CAAC;AAIH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"ThunderIDContext.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDContext.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,mBAAmB,EAEnB,UAAU,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,wBAAwB,EACxB,aAAa,EACb,cAAc,EACd,0BAA0B,EAC1B,aAAa,EAEb,eAAe,EACf,uBAAuB,EACvB,OAAO,EACP,6BAA6B,EAC7B,IAAI,EACL,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,OAAO,EAAgB,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AACzD,OAAO,oBAAoB,MAAM,4BAA4B,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;OAGG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACxD;;;;OAIG;IACH,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B;;OAEG;IACH,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;IACrD;;OAEG;IACH,0BAA0B,EAAE,MAAM,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,sBAAsB,EAAE,CACtB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,6BAA6B,KACpC,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9C,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,SAAS,EAAE;QACT;;;;WAIG;QACH,SAAS,EAAE,wBAAwB,GAAG,IAAI,CAAC;KAC5C,CAAC;IACF;;;;OAIG;IACH,aAAa,EAAE,CAAC,MAAM,EAAE,0BAA0B,KAAK,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC;IACzF;;;;;OAKG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C;;;;;OAKG;IACH,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC;;;OAGG;IACH,iBAAiB,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E;;;;OAIG;IACH,IAAI,EAAE;QACJ;;;WAGG;QACH,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB;;;;WAIG;QACH,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E;;;;WAIG;QACH,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACpF,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;;OAGG;IACH,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAElC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC;;;;;;;;OAQG;IACH,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;OAEG;IACH,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,2BAA2B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAE1F;;;;;;;;;;;OAWG;IACH,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;IAElE;;;;OAIG;IACH,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;OAKG;IACH,YAAY,CAAC,EAAE;QACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IAEF;;;OAGG;IACH,cAAc,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAEvD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;OAIG;IACH,OAAO,EAAE,GAAG,CAAC;IAEb;;;OAGG;IACH,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,IAAI,EAAE,GAAG,CAAC;IAEV;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAAC;IAEnD;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;AAE/C;;GAEG;AACH,QAAA,MAAM,gBAAgB,EAAE,OAAO,CAAC,qBAAqB,GAAG,IAAI,CA8C1D,CAAC;AAIH,eAAe,gBAAgB,CAAC"}

package/dist/contexts/ThunderID/ThunderIDContext.js

@@ -11,8 +11,13 @@ const ThunderIDContext = createContext({
 	baseUrl: void 0,
 	clearSession: () => {},
 	clientId: void 0,
+	currentOrganizationUnit: null,
+	currentProject: null,
+	getCurrentOrganizationUnit: () => Promise.resolve(null),
 	preferences: void 0,
+	switchOrganizationUnit: () => Promise.resolve(void 0),
 	scopes: void 0,
+	setCurrentProject: () => void 0,
 	discovery: { wellKnown: null },
 	exchangeToken: null,
 	getAccessToken: null,

package/dist/contexts/ThunderID/ThunderIDContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDContext.js","names":["ThunderIDContext: Context<ThunderIDContextProps | null>"],"sources":["../../../src/contexts/ThunderID/ThunderIDContext.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  fallbackResourceInvalidator,\n  ApiFetcher,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  FlowMetadataResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  IdToken,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  StorageManager,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  VendorConstants,\n  AttributeSchema,\n} from '@thunderid/browser';\nimport {Context, createContext} from 'react';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\n\n/**\n * Props interface of {@link ThunderIDContext}\n */\nexport type ThunderIDContextProps = {\n  afterSignInUrl: string | undefined;\n  applicationId: string | undefined;\n  /**\n   * The base URL the SDK's API requests are built on: the ThunderID tenant, or in backend mode the\n   * backend's proxy (`endpoints.backend.proxy`, resolved against `baseUrl`).\n   */\n  baseUrl: string | undefined;\n  clientId: string | undefined;\n  /**\n   * Optional endpoint URL overrides from the client config. Used to resolve resource-server\n   * endpoints (e.g. flow/user-management) independently of `baseUrl` — see `resolveResourceEndpoint`.\n   */\n  endpoints?: ThunderIDReactConfig['endpoints'];\n  preferences?: ThunderIDReactConfig['preferences'];\n  scopes: string | string[] | undefined;\n  /**\n   * OIDC discovery data.\n   */\n  discovery: {\n    /**\n     * The response from the `.well-known/openid-configuration` endpoint.\n     * Contains server capabilities, supported endpoints, and metadata.\n     * `null` while loading or when discovery has not been fetched.\n     */\n    wellKnown: OIDCDiscoveryApiResponse | null;\n  };\n  /**\n   * Swaps the current access token with a new one based on the provided configuration (with a grant type).\n   * @param config - Configuration for the token exchange request.\n   * @returns A promise that resolves to the token response or the raw response.\n   */\n  exchangeToken: (config: TokenExchangeRequestConfig) => Promise<TokenResponse | Response>;\n  /**\n   * Retrieves the access token stored in the storage.\n   * This function retrieves the access token and returns it.\n   * @remarks This does not work in the `webWorker` or any other worker environment.\n   * @returns A promise that resolves to the access token.\n   */\n  getAccessToken: () => Promise<string>;\n  /**\n   * Retrieves the permissions the signed-in user's access token grants. In backend mode they come from\n   * the backend's session, so the token stays on the backend.\n   * @returns A promise that resolves to the granted permissions.\n   */\n  getGrantedPermissions: () => Promise<string[]>;\n  /**\n   * Function to retrieve the decoded ID token.\n   * This function decodes the ID token and returns its payload.\n   * It can be used to access user claims and other information contained in the ID token.\n   *\n   * @returns A promise that resolves to the decoded ID token payload.\n   */\n  getDecodedIdToken: () => Promise<IdToken>;\n  /**\n   * Function to retrieve the ID token.\n   * This function retrieves the ID token and returns it.\n   *\n   * @returns A promise that resolves to the ID token.\n   */\n  getIdToken: () => Promise<string>;\n  /**\n   * Returns the underlying StorageManager instance for reading and writing SDK-managed storage.\n   * Resolves to `null` where the SDK has no browser storage (the context default, and `@thunderid/nextjs`).\n   */\n  getStorageManager: () => Promise<StorageManager<ThunderIDReactConfig> | null>;\n  /**\n   * HTTP request function to make API calls.\n   * @param requestConfig - Configuration for the HTTP request.\n   * @returns A promise that resolves to the HTTP response.\n   */\n  http: {\n    /**\n     * Transport supplied through `ThunderIDProvider`'s `http.fetcher` prop, used by the management\n     * hooks. `undefined` means the hooks fall back to the SDK's authenticated HTTP client.\n     */\n    fetcher?: ApiFetcher;\n    /**\n     * Makes an HTTP request using the provided configuration.\n     * @param requestConfig - Configuration for the HTTP request.\n     * @returns A promise that resolves to the HTTP response.\n     */\n    request: (requestConfig?: HttpRequestConfig) => Promise<HttpResponse<any>>;\n    /**\n     * Makes multiple HTTP requests based on the provided configuration.\n     * @param requestConfigs - Set of configurations for the HTTP requests.\n     * @returns A promise that resolves to an array of HTTP responses.\n     */\n    requestAll: (requestConfigs?: HttpRequestConfig[]) => Promise<HttpResponse<any>[]>;\n  };\n  /**\n   * Coordinates refetching between the management hooks: a successful mutation invalidates the\n   * queries whose data it changed.\n   */\n  invalidator?: ResourceInvalidator;\n  /**\n   * Instance ID for multi-instance support.\n   */\n  instanceId: number;\n  isInitialized: boolean;\n  /**\n   * Flag indicating whether the SDK is working in the background.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating whether flow metadata is currently being fetched.\n   */\n  isMetaLoading: boolean;\n  /**\n   * Flag indicating whether the user is signed in or not.\n   */\n  isSignedIn: boolean;\n\n  /**\n   * Flow metadata returned by `GET /flow/meta` (v2 platform only).\n   * `null` while loading or when `resolveFromMeta` is disabled.\n   */\n  meta: FlowMetadataResponse | null;\n\n  organizationHandle: string | undefined;\n\n  /**\n   * Re-initializes the client with a new configuration.\n   *\n   * @remarks\n   * This can be partial configuration to update only specific fields.\n   *\n   * @param config - New configuration to re-initialize the client with.\n   * @returns Promise resolving to boolean indicating success.\n   */\n  reInitialize: (config: Partial<ThunderIDReactConfig>) => Promise<boolean>;\n\n  /**\n   * Recovery function to initiate the account/password recovery flow.\n   */\n  recover: (payload?: EmbeddedRecoveryFlowRequest) => Promise<EmbeddedRecoveryFlowResponse>;\n\n  /**\n   * Resolves `{{ t(key) }}` and `{{ meta(path) }}` template expressions in a string,\n   * using the current i18n translation function and flow metadata from context.\n   *\n   * Useful in render-props patterns where consumers need to expand template strings\n   * that come from the server (e.g. component labels, placeholders, headings).\n   *\n   * @example\n   * const {resolveFlowTemplateLiterals} = useThunderID();\n   * resolveFlowTemplateLiterals('{{ t(signin.heading.label) }}') // → 'Sign In'\n   * resolveFlowTemplateLiterals('Login to {{ meta(application.name) }}') // → 'Login to My App'\n   */\n  resolveFlowTemplateLiterals: (text: string | undefined) => string;\n\n  /**\n   * Sign-in function to initiate the authentication process.\n   * @remark This is the programmatic version of the `SignInButton` component.\n   * TODO: Fix the types.\n   */\n  signIn: (...args: any) => Promise<any>;\n\n  /**\n   * Optional additional parameters to be sent in the sign-in request.\n   * This can include custom parameters that your authorization server supports.\n   * These parameters will be included in the authorization request sent to the server.\n   * If not provided, no additional parameters will be sent.\n   *\n   * @example\n   * signInOptions: { prompt: \"login\", fidp: \"OrganizationSSO\" }\n   */\n  signInOptions?: SignInOptions;\n\n  /**\n   * Optional token request configuration. params are appended to the token endpoint POST body.\n   *\n   * @example\n   * tokenRequest: { params: { resource: \"https://api.example.com\" } }\n   */\n  tokenRequest?: {\n    params?: Record<string, unknown>;\n  };\n\n  /**\n   * Silent sign-in function to re-authenticate the user without user interaction.\n   * @remark This is the programmatic version of the `SilentSignIn` component.\n   */\n  signInSilently: ThunderIDReactClient['signInSilently'];\n\n  signInUrl: string | undefined;\n  /**\n   * Sign-out function to terminate the authentication session.\n   * @remark This is the programmatic version of the `SignOutButton` component.\n   * FIXME: Fix the types.\n   */\n  signOut: any;\n\n  /**\n   * Sign-up function to initiate the registration process.\n   * @remark This is the programmatic version of the `SignUpButton` component.\n   */\n  signUp: (...args: any[]) => Promise<any>;\n\n  signUpUrl: string | undefined;\n\n  user: any;\n\n  /**\n   * Schema metadata for the user type returned by GET /users/me/meta.\n   */\n  userSchema: Record<string, AttributeSchema> | null;\n\n  /**\n   * Vendor/brand namespace used to prefix storage keys, cookie names, and CSS class names.\n   * Resolved from the `vendor` config option, defaulting to `'thunderid'`.\n   */\n  vendor: string;\n} & Pick<ThunderIDReactClient, 'clearSession'>;\n\n/**\n * Context object for managing the Authentication flow builder core context.\n */\nconst ThunderIDContext: Context<ThunderIDContextProps | null> = createContext<null | ThunderIDContextProps>({\n  afterSignInUrl: undefined,\n  applicationId: undefined,\n  baseUrl: undefined,\n  clearSession: () => {},\n  clientId: undefined,\n  preferences: undefined,\n  scopes: undefined,\n  discovery: {\n    wellKnown: null,\n  },\n  exchangeToken: null as unknown as ThunderIDContextProps['exchangeToken'],\n  getAccessToken: null as unknown as ThunderIDContextProps['getAccessToken'],\n  getGrantedPermissions: null as unknown as ThunderIDContextProps['getGrantedPermissions'],\n  getDecodedIdToken: null as unknown as ThunderIDContextProps['getDecodedIdToken'],\n  getIdToken: null as unknown as ThunderIDContextProps['getIdToken'],\n  getStorageManager: () => Promise.resolve(null),\n  http: {\n    request: () => null as unknown as Promise<HttpResponse<any>>,\n    requestAll: () => null as unknown as Promise<HttpResponse<any>[]>,\n  },\n  instanceId: 0,\n  invalidator: fallbackResourceInvalidator,\n  isInitialized: false,\n  isLoading: true,\n  isMetaLoading: false,\n  isSignedIn: false,\n  meta: null,\n  organizationHandle: undefined,\n  reInitialize: null as unknown as ThunderIDContextProps['reInitialize'],\n  recover: () => Promise.resolve({} as any),\n  resolveFlowTemplateLiterals: (text: string | undefined) => text ?? '',\n  signIn: () => Promise.resolve({} as any),\n  signInSilently: () => Promise.resolve({} as any),\n  signInUrl: undefined,\n  signOut: () => Promise.resolve({} as any),\n  signUp: () => Promise.resolve({} as any),\n  signUpUrl: undefined,\n  user: null,\n  userSchema: null,\n  vendor: VendorConstants.VENDOR_PREFIX,\n});\n\nThunderIDContext.displayName = 'ThunderIDContext';\n\nexport default ThunderIDContext;\n"],"mappings":";;;;;;;AAsPA,MAAMA,mBAA0D,cAA4C;CAC1G,gBAAgB;CAChB,eAAe;CACf,SAAS;CACT,oBAAoB;CACpB,UAAU;CACV,aAAa;CACb,QAAQ;CACR,WAAW,EACT,WAAW,MACZ;CACD,eAAe;CACf,gBAAgB;CAChB,uBAAuB;CACvB,mBAAmB;CACnB,YAAY;CACZ,yBAAyB,QAAQ,QAAQ,KAAK;CAC9C,MAAM;EACJ,eAAe;EACf,kBAAkB;EACnB;CACD,YAAY;CACZ,aAAa;CACb,eAAe;CACf,WAAW;CACX,eAAe;CACf,YAAY;CACZ,MAAM;CACN,oBAAoB;CACpB,cAAc;CACd,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,8BAA8B,SAA6B,QAAQ;CACnE,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,sBAAsB,QAAQ,QAAQ,EAAE,CAAQ;CAChD,WAAW;CACX,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,WAAW;CACX,MAAM;CACN,YAAY;CACZ,QAAQ,gBAAgB;CACzB,CAAC;AAEF,iBAAiB,cAAc;AAE/B,+BAAe"}
+{"version":3,"file":"ThunderIDContext.js","names":["ThunderIDContext: Context<ThunderIDContextProps | null>"],"sources":["../../../src/contexts/ThunderID/ThunderIDContext.ts"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  fallbackResourceInvalidator,\n  ApiFetcher,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  FlowMetadataResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  IdToken,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  StorageManager,\n  TokenExchangeRequestConfig,\n  TokenResponse,\n  VendorConstants,\n  AttributeSchema,\n  CurrentOrganizationUnit,\n  Project,\n  SwitchOrganizationUnitOptions,\n  User,\n} from '@thunderid/browser';\nimport {Context, createContext} from 'react';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\n\n/**\n * Props interface of {@link ThunderIDContext}\n */\nexport type ThunderIDContextProps = {\n  afterSignInUrl: string | undefined;\n  applicationId: string | undefined;\n  /**\n   * The base URL the SDK's API requests are built on: the ThunderID tenant, or in backend mode the\n   * backend's proxy (`endpoints.backend.proxy`, resolved against `baseUrl`).\n   */\n  baseUrl: string | undefined;\n  clientId: string | undefined;\n  /**\n   * The organization unit the signed-in session was issued for, from its `ouId`, `ouHandle` and\n   * `ouName` claims, or `null`. For display only, never for an authorization decision.\n   */\n  currentOrganizationUnit: CurrentOrganizationUnit | null;\n  /**\n   * The project the user chose for the management UI, for example with `ProjectSwitcher`, or `null`.\n   * It is client-side context, not a sign-in: tokens and permissions do not change with it.\n   * `ApplicationList`, `AgentList`, `ApplicationCreate` and `AgentCreate` send it as `projectId`.\n   */\n  currentProject: Project | null;\n  /**\n   * Chooses the current project, or clears it with `null`. Kept per vendor in `localStorage`.\n   */\n  setCurrentProject: (project: Project | null) => void;\n  /**\n   * Reads the current organization unit from the session's claims. For display only.\n   */\n  getCurrentOrganizationUnit: () => Promise<CurrentOrganizationUnit | null>;\n  /**\n   * Signs in again bounded to the organization unit `organizationUnitId`, replacing the session on\n   * success and refreshing the user. A failed switch keeps the previous session and rejects with an\n   * error whose code is one of `OrganizationUnitSwitchErrorCodes`. In redirect mode the page may leave\n   * for the unit's authorization endpoint, and the promise then resolves with `undefined`.\n   */\n  switchOrganizationUnit: (\n    organizationUnitId: string,\n    options?: SwitchOrganizationUnitOptions,\n  ) => Promise<User | undefined>;\n  /**\n   * Optional endpoint URL overrides from the client config. Used to resolve resource-server\n   * endpoints (e.g. flow/user-management) independently of `baseUrl` — see `resolveResourceEndpoint`.\n   */\n  endpoints?: ThunderIDReactConfig['endpoints'];\n  preferences?: ThunderIDReactConfig['preferences'];\n  scopes: string | string[] | undefined;\n  /**\n   * OIDC discovery data.\n   */\n  discovery: {\n    /**\n     * The response from the `.well-known/openid-configuration` endpoint.\n     * Contains server capabilities, supported endpoints, and metadata.\n     * `null` while loading or when discovery has not been fetched.\n     */\n    wellKnown: OIDCDiscoveryApiResponse | null;\n  };\n  /**\n   * Swaps the current access token with a new one based on the provided configuration (with a grant type).\n   * @param config - Configuration for the token exchange request.\n   * @returns A promise that resolves to the token response or the raw response.\n   */\n  exchangeToken: (config: TokenExchangeRequestConfig) => Promise<TokenResponse | Response>;\n  /**\n   * Retrieves the access token stored in the storage.\n   * This function retrieves the access token and returns it.\n   * @remarks This does not work in the `webWorker` or any other worker environment.\n   * @returns A promise that resolves to the access token.\n   */\n  getAccessToken: () => Promise<string>;\n  /**\n   * Retrieves the permissions the signed-in user's access token grants. In backend mode they come from\n   * the backend's session, so the token stays on the backend.\n   * @returns A promise that resolves to the granted permissions.\n   */\n  getGrantedPermissions: () => Promise<string[]>;\n  /**\n   * Function to retrieve the decoded ID token.\n   * This function decodes the ID token and returns its payload.\n   * It can be used to access user claims and other information contained in the ID token.\n   *\n   * @returns A promise that resolves to the decoded ID token payload.\n   */\n  getDecodedIdToken: () => Promise<IdToken>;\n  /**\n   * Function to retrieve the ID token.\n   * This function retrieves the ID token and returns it.\n   *\n   * @returns A promise that resolves to the ID token.\n   */\n  getIdToken: () => Promise<string>;\n  /**\n   * Returns the underlying StorageManager instance for reading and writing SDK-managed storage.\n   * Resolves to `null` where the SDK has no browser storage (the context default, and `@thunderid/nextjs`).\n   */\n  getStorageManager: () => Promise<StorageManager<ThunderIDReactConfig> | null>;\n  /**\n   * HTTP request function to make API calls.\n   * @param requestConfig - Configuration for the HTTP request.\n   * @returns A promise that resolves to the HTTP response.\n   */\n  http: {\n    /**\n     * Transport supplied through `ThunderIDProvider`'s `http.fetcher` prop, used by the management\n     * hooks. `undefined` means the hooks fall back to the SDK's authenticated HTTP client.\n     */\n    fetcher?: ApiFetcher;\n    /**\n     * Makes an HTTP request using the provided configuration.\n     * @param requestConfig - Configuration for the HTTP request.\n     * @returns A promise that resolves to the HTTP response.\n     */\n    request: (requestConfig?: HttpRequestConfig) => Promise<HttpResponse<any>>;\n    /**\n     * Makes multiple HTTP requests based on the provided configuration.\n     * @param requestConfigs - Set of configurations for the HTTP requests.\n     * @returns A promise that resolves to an array of HTTP responses.\n     */\n    requestAll: (requestConfigs?: HttpRequestConfig[]) => Promise<HttpResponse<any>[]>;\n  };\n  /**\n   * Coordinates refetching between the management hooks: a successful mutation invalidates the\n   * queries whose data it changed.\n   */\n  invalidator?: ResourceInvalidator;\n  /**\n   * Instance ID for multi-instance support.\n   */\n  instanceId: number;\n  isInitialized: boolean;\n  /**\n   * Flag indicating whether the SDK is working in the background.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating whether flow metadata is currently being fetched.\n   */\n  isMetaLoading: boolean;\n  /**\n   * Flag indicating whether the user is signed in or not.\n   */\n  isSignedIn: boolean;\n\n  /**\n   * Flow metadata returned by `GET /flow/meta` (v2 platform only).\n   * `null` while loading or when `resolveFromMeta` is disabled.\n   */\n  meta: FlowMetadataResponse | null;\n\n  organizationHandle: string | undefined;\n\n  /**\n   * Re-initializes the client with a new configuration.\n   *\n   * @remarks\n   * This can be partial configuration to update only specific fields.\n   *\n   * @param config - New configuration to re-initialize the client with.\n   * @returns Promise resolving to boolean indicating success.\n   */\n  reInitialize: (config: Partial<ThunderIDReactConfig>) => Promise<boolean>;\n\n  /**\n   * Recovery function to initiate the account/password recovery flow.\n   */\n  recover: (payload?: EmbeddedRecoveryFlowRequest) => Promise<EmbeddedRecoveryFlowResponse>;\n\n  /**\n   * Resolves `{{ t(key) }}` and `{{ meta(path) }}` template expressions in a string,\n   * using the current i18n translation function and flow metadata from context.\n   *\n   * Useful in render-props patterns where consumers need to expand template strings\n   * that come from the server (e.g. component labels, placeholders, headings).\n   *\n   * @example\n   * const {resolveFlowTemplateLiterals} = useThunderID();\n   * resolveFlowTemplateLiterals('{{ t(signin.heading.label) }}') // → 'Sign In'\n   * resolveFlowTemplateLiterals('Login to {{ meta(application.name) }}') // → 'Login to My App'\n   */\n  resolveFlowTemplateLiterals: (text: string | undefined) => string;\n\n  /**\n   * Sign-in function to initiate the authentication process.\n   * @remark This is the programmatic version of the `SignInButton` component.\n   * TODO: Fix the types.\n   */\n  signIn: (...args: any) => Promise<any>;\n\n  /**\n   * Optional additional parameters to be sent in the sign-in request.\n   * This can include custom parameters that your authorization server supports.\n   * These parameters will be included in the authorization request sent to the server.\n   * If not provided, no additional parameters will be sent.\n   *\n   * @example\n   * signInOptions: { prompt: \"login\", fidp: \"OrganizationSSO\" }\n   */\n  signInOptions?: SignInOptions;\n\n  /**\n   * Optional token request configuration. params are appended to the token endpoint POST body.\n   *\n   * @example\n   * tokenRequest: { params: { resource: \"https://api.example.com\" } }\n   */\n  tokenRequest?: {\n    params?: Record<string, unknown>;\n  };\n\n  /**\n   * Silent sign-in function to re-authenticate the user without user interaction.\n   * @remark This is the programmatic version of the `SilentSignIn` component.\n   */\n  signInSilently: ThunderIDReactClient['signInSilently'];\n\n  signInUrl: string | undefined;\n  /**\n   * Sign-out function to terminate the authentication session.\n   * @remark This is the programmatic version of the `SignOutButton` component.\n   * FIXME: Fix the types.\n   */\n  signOut: any;\n\n  /**\n   * Sign-up function to initiate the registration process.\n   * @remark This is the programmatic version of the `SignUpButton` component.\n   */\n  signUp: (...args: any[]) => Promise<any>;\n\n  signUpUrl: string | undefined;\n\n  user: any;\n\n  /**\n   * Schema metadata for the user type returned by GET /users/me/meta.\n   */\n  userSchema: Record<string, AttributeSchema> | null;\n\n  /**\n   * Vendor/brand namespace used to prefix storage keys, cookie names, and CSS class names.\n   * Resolved from the `vendor` config option, defaulting to `'thunderid'`.\n   */\n  vendor: string;\n} & Pick<ThunderIDReactClient, 'clearSession'>;\n\n/**\n * Context object for managing the Authentication flow builder core context.\n */\nconst ThunderIDContext: Context<ThunderIDContextProps | null> = createContext<null | ThunderIDContextProps>({\n  afterSignInUrl: undefined,\n  applicationId: undefined,\n  baseUrl: undefined,\n  clearSession: () => {},\n  clientId: undefined,\n  currentOrganizationUnit: null,\n  currentProject: null,\n  getCurrentOrganizationUnit: () => Promise.resolve(null),\n  preferences: undefined,\n  switchOrganizationUnit: () => Promise.resolve(undefined),\n  scopes: undefined,\n  setCurrentProject: () => undefined,\n  discovery: {\n    wellKnown: null,\n  },\n  exchangeToken: null as unknown as ThunderIDContextProps['exchangeToken'],\n  getAccessToken: null as unknown as ThunderIDContextProps['getAccessToken'],\n  getGrantedPermissions: null as unknown as ThunderIDContextProps['getGrantedPermissions'],\n  getDecodedIdToken: null as unknown as ThunderIDContextProps['getDecodedIdToken'],\n  getIdToken: null as unknown as ThunderIDContextProps['getIdToken'],\n  getStorageManager: () => Promise.resolve(null),\n  http: {\n    request: () => null as unknown as Promise<HttpResponse<any>>,\n    requestAll: () => null as unknown as Promise<HttpResponse<any>[]>,\n  },\n  instanceId: 0,\n  invalidator: fallbackResourceInvalidator,\n  isInitialized: false,\n  isLoading: true,\n  isMetaLoading: false,\n  isSignedIn: false,\n  meta: null,\n  organizationHandle: undefined,\n  reInitialize: null as unknown as ThunderIDContextProps['reInitialize'],\n  recover: () => Promise.resolve({} as any),\n  resolveFlowTemplateLiterals: (text: string | undefined) => text ?? '',\n  signIn: () => Promise.resolve({} as any),\n  signInSilently: () => Promise.resolve({} as any),\n  signInUrl: undefined,\n  signOut: () => Promise.resolve({} as any),\n  signUp: () => Promise.resolve({} as any),\n  signUpUrl: undefined,\n  user: null,\n  userSchema: null,\n  vendor: VendorConstants.VENDOR_PREFIX,\n});\n\nThunderIDContext.displayName = 'ThunderIDContext';\n\nexport default ThunderIDContext;\n"],"mappings":";;;;;;;AAuRA,MAAMA,mBAA0D,cAA4C;CAC1G,gBAAgB;CAChB,eAAe;CACf,SAAS;CACT,oBAAoB;CACpB,UAAU;CACV,yBAAyB;CACzB,gBAAgB;CAChB,kCAAkC,QAAQ,QAAQ,KAAK;CACvD,aAAa;CACb,8BAA8B,QAAQ,QAAQ,OAAU;CACxD,QAAQ;CACR,yBAAyB;CACzB,WAAW,EACT,WAAW,MACZ;CACD,eAAe;CACf,gBAAgB;CAChB,uBAAuB;CACvB,mBAAmB;CACnB,YAAY;CACZ,yBAAyB,QAAQ,QAAQ,KAAK;CAC9C,MAAM;EACJ,eAAe;EACf,kBAAkB;EACnB;CACD,YAAY;CACZ,aAAa;CACb,eAAe;CACf,WAAW;CACX,eAAe;CACf,YAAY;CACZ,MAAM;CACN,oBAAoB;CACpB,cAAc;CACd,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,8BAA8B,SAA6B,QAAQ;CACnE,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,sBAAsB,QAAQ,QAAQ,EAAE,CAAQ;CAChD,WAAW;CACX,eAAe,QAAQ,QAAQ,EAAE,CAAQ;CACzC,cAAc,QAAQ,QAAQ,EAAE,CAAQ;CACxC,WAAW;CACX,MAAM;CACN,YAAY;CACZ,QAAQ,gBAAgB;CACzB,CAAC;AAEF,iBAAiB,cAAc;AAE/B,+BAAe"}

package/dist/contexts/ThunderID/ThunderIDProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AAwBA,OAAO,EAAC,EAAE,EAAa,iBAAiB,EAAkE,MAAM,OAAO,CAAC;AAKxH,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AAezD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,QAAA,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CA+kBpE,CAAC;AAEF,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AA4BA,OAAO,EAAC,EAAE,EAAa,iBAAiB,EAAkE,MAAM,OAAO,CAAC;AAMxH,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AAezD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,QAAA,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAqnBpE,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/dist/contexts/ThunderID/ThunderIDProvider.js

@@ -1,4 +1,5 @@
 import ThunderIDContext_default from "./ThunderIDContext.js";
+import useCurrentProjectState_default from "./useCurrentProjectState.js";
 import getUsersMe_default from "../../api/account/getUsersMe.js";
 import getUsersMeMeta_default from "../../api/account/getUsersMeMeta.js";
 import useBrowserUrl_default from "../../hooks/useBrowserUrl.js";
@@ -10,7 +11,7 @@ import FlowMetaProvider_default from "../FlowMeta/FlowMetaProvider.js";
 import I18nProvider_default from "../I18n/I18nProvider.js";
 import ThemeProvider_default from "../Theme/ThemeProvider.js";
 import UserProvider_default from "../User/UserProvider.js";
-import { SPAUtils, ThunderIDRuntimeError, createPackageComponentLogger, createResourceInvalidator, extractUserClaimsFromIdToken, generateFlattenedUserProfile, getVendorPrefix, resolveRequestBaseUrl, resolveResourceEndpoint } from "@thunderid/browser";
+import { SPAUtils, ThunderIDRuntimeError, createPackageComponentLogger, createResourceInvalidator, extractUserClaimsFromIdToken, generateFlattenedUserProfile, getCurrentOrganizationUnitFromClaims, getVendorPrefix, resolveRequestBaseUrl, resolveResourceEndpoint } from "@thunderid/browser";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -29,6 +30,8 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 	const [isLoadingSync, setIsLoadingSync] = useState(true);
 	const [userProfile, setUserProfile] = useState(null);
 	const [userSchema, setUserSchema] = useState(null);
+	const [currentOrganizationUnit, setCurrentOrganizationUnit] = useState(null);
+	const { currentProject, setCurrentProject } = useCurrentProjectState_default(getVendorPrefix(vendor));
 	const requestBaseUrl = resolveRequestBaseUrl({
 		baseUrl: initialBaseUrl,
 		endpoints: rest.endpoints
@@ -75,6 +78,7 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 			}
 			const shouldFetchProfile = preferences?.user?.fetchUserProfile !== false;
 			const claims = extractUserClaimsFromIdToken(decodedToken);
+			setCurrentOrganizationUnit(getCurrentOrganizationUnitFromClaims(decodedToken));
 			let profileData = claims;
 			const currentSignInStatus = await client.isSignedIn();
 			if (currentSignInStatus && shouldFetchProfile) {
@@ -158,6 +162,7 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 				await updateSession();
 			});
 			await client.on("sign-out", () => {
+				setCurrentOrganizationUnit(null);
 				setUser(null);
 				setUserProfile(null);
 				setIsSignedInSync(false);
@@ -250,6 +255,17 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 			setIsLoadingSync(client.isLoading());
 		}
 	};
+	/**
+	* Signs in again bounded to another organization unit, then refreshes the user. A failed switch
+	* leaves the session, the user and the current unit as they were, and rethrows the client's error
+	* (its code is one of `OrganizationUnitSwitchErrorCodes`).
+	*/
+	const switchOrganizationUnit = async (organizationUnitId, options) => {
+		const result = await client.switchOrganizationUnit(organizationUnitId, options);
+		if (result) await updateSession();
+		return result ?? void 0;
+	};
+	const getCurrentOrganizationUnit = useCallback(async () => client.getCurrentOrganizationUnit(), [client]);
 	const handleProfileUpdate = (payload) => {
 		setUser(payload);
 		setUserProfile((prev) => ({
@@ -302,6 +318,11 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 		scopes: config.scopes,
 		clearSession,
 		clientId,
+		currentOrganizationUnit,
+		currentProject,
+		getCurrentOrganizationUnit,
+		setCurrentProject,
+		switchOrganizationUnit,
 		discovery: { wellKnown },
 		exchangeToken,
 		getAccessToken,
@@ -373,7 +394,12 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 		request,
 		requestAll,
 		signOut,
-		signUp
+		signUp,
+		currentOrganizationUnit,
+		currentProject,
+		getCurrentOrganizationUnit,
+		setCurrentProject,
+		switchOrganizationUnit
 	]);
 	return /* @__PURE__ */ jsx(ThunderIDContext_default.Provider, {
 		value,

package/dist/contexts/ThunderID/ThunderIDProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","storageManagerRef: any","useBrowserUrl","requestBaseUrl: string","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getGrantedPermissions: () => Promise<string[]>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  createResourceInvalidator,\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveRequestBaseUrl,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport getUsersMe from '../../api/account/getUsersMe';\nimport getUsersMeMeta from '../../api/account/getUsersMeMeta';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  // The base the SDK's API requests are built on. In backend mode it's the backend's proxy.\n  const requestBaseUrl: string = resolveRequestBaseUrl({baseUrl: initialBaseUrl, endpoints: rest.endpoints}) ?? '';\n  const [baseUrl, setBaseUrl] = useState<string>(requestBaseUrl);\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl: initialBaseUrl ?? '',\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(requestBaseUrl);\n  }, [requestBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${resolveRequestBaseUrl(await client.getConfiguration()) ?? ''}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  /**\n   * Re-reads `/users/me` into the session profile, so a change made outside the profile API, such as a\n   * recorded verification, shows. Like a profile update, the result replaces the profile; ID token\n   * claims are not merged back in, since they may hold a value the user has since changed.\n   */\n  const revalidateProfile = async (): Promise<void> => {\n    if (preferences?.user?.fetchUserProfile === false) return;\n\n    handleProfileUpdate(\n      await getUsersMe({\n        baseUrl,\n        instanceId,\n        url: resolveResourceEndpoint('usersMe', config),\n      }),\n    );\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getGrantedPermissions: () => Promise<string[]> = useCallback(\n    async (): Promise<string[]> => client.getGrantedPermissions(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(resolveRequestBaseUrl(reinitializedConfig) ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getGrantedPermissions,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getGrantedPermissions,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile!}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n                revalidateProfile={revalidateProfile}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;AAuCA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uBAAsB,UAAU,OAAO;CAEvC,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA+B,cAAc,IAAIC,6BAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,cAAmC,cAAc,2BAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,oBAAyB,OAAY,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,uBAAe;CACjE,MAAM,CAAC,MAAM,WAAW,SAAsB,KAAK;CACnD,MAAM,CAAC,gBAAgB,qBAAqB,SAAkB,MAAM;CACpE,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,eAAe,oBAAoB,SAAkB,KAAK;CAEjE,MAAM,CAAC,aAAa,kBAAkB,SAA6B,KAAK;CACxE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,KAAK;CAE1F,MAAMC,iBAAyB,sBAAsB;EAAC,SAAS;EAAgB,WAAW,KAAK;EAAU,CAAC,IAAI;CAC9G,MAAM,CAAC,SAAS,cAAc,SAAiB,eAAe;CAC9D,MAAM,CAAC,QAAQ,aAAa,SAA+B;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA,SAAS,kBAAkB;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,WAAW,gBAAgB,SAA0C,KAAK;CAIjF,MAAMC,0BAA2D,OAA6B,KAAK;AAEnG,iBAAgB;AACd,aAAW,eAAe;IACzB,CAAC,eAAe,CAAC;AAEpB,iBAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,GAAG,sBAAsB,MAAM,OAAO,kBAAkB,CAAC,IAAI,GAAG;AAClF,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,SAAe,6BAA6B,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,mBAAW;MACtC,SAAS;MACT,KAAK,wBAAwB,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,cAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,uBAAe;MACnC,SAAS;MACT,KAAK,wBAAwB,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,cAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,kBAAkB,6BAA6B,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,aAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,GAAG,gBAAgB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQ,SAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,iBAAgB;EACd,IAAIC;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,iBAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,iBAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAI,sBACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;;;;;;CAQL,MAAM,oBAAoB,YAA2B;AACnD,MAAI,aAAa,MAAM,qBAAqB,MAAO;AAEnD,sBACE,MAAMT,mBAAW;GACf;GACA;GACA,KAAK,wBAAwB,WAAW,OAAO;GAChD,CAAC,CACH;;CAGH,MAAMW,oBAA4C,YAChD,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,aAAoC,YAAY,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,iBAAwC,YAC5C,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,wBAAiD,YACrD,YAA+B,OAAO,uBAAuB,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,oBAAgE,YAAY,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,aAA+C,YACnD,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,gBAAuD,YAC3D,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,SAA2C,YAC/C,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,eAAiD,YACrD,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,eAAoD,YACxD,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,sBAAsB,oBAAoB,IAAI,GAAG;AAC5D,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,QAAa,eACV;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ,gBAAgB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAgB;YAChC,oBAACC;GAAa,aAAa,aAAa;GAAM,QAAQ,gBAAgB,OAAO,OAAO;aAClF,oBAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,oBAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,oBAACC,kCACC,oBAACC;MACC,SAAS;MACG;MACZ,iBAAiB;MACE;gBAEnB,oBAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","storageManagerRef: any","useBrowserUrl","useCurrentProjectState","requestBaseUrl: string","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","switchOrganizationUnit: ThunderIDContextProps['switchOrganizationUnit']","result: User | TokenResponse | undefined","getCurrentOrganizationUnit: ThunderIDContextProps['getCurrentOrganizationUnit']","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getGrantedPermissions: () => Promise<string[]>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  createResourceInvalidator,\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveRequestBaseUrl,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n  CurrentOrganizationUnit,\n  SwitchOrganizationUnitOptions,\n  TokenResponse,\n  getCurrentOrganizationUnitFromClaims,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useCurrentProjectState, {CurrentProjectState} from './useCurrentProjectState';\nimport getUsersMe from '../../api/account/getUsersMe';\nimport getUsersMeMeta from '../../api/account/getUsersMeMeta';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [currentOrganizationUnit, setCurrentOrganizationUnit] = useState<CurrentOrganizationUnit | null>(null);\n  const {currentProject, setCurrentProject}: CurrentProjectState = useCurrentProjectState(getVendorPrefix(vendor));\n  // The base the SDK's API requests are built on. In backend mode it's the backend's proxy.\n  const requestBaseUrl: string = resolveRequestBaseUrl({baseUrl: initialBaseUrl, endpoints: rest.endpoints}) ?? '';\n  const [baseUrl, setBaseUrl] = useState<string>(requestBaseUrl);\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl: initialBaseUrl ?? '',\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(requestBaseUrl);\n  }, [requestBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${resolveRequestBaseUrl(await client.getConfiguration()) ?? ''}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      setCurrentOrganizationUnit(getCurrentOrganizationUnitFromClaims(decodedToken as Record<string, unknown>));\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setCurrentOrganizationUnit(null);\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  /**\n   * Signs in again bounded to another organization unit, then refreshes the user. A failed switch\n   * leaves the session, the user and the current unit as they were, and rethrows the client's error\n   * (its code is one of `OrganizationUnitSwitchErrorCodes`).\n   */\n  const switchOrganizationUnit: ThunderIDContextProps['switchOrganizationUnit'] = async (\n    organizationUnitId: string,\n    options?: SwitchOrganizationUnitOptions,\n  ): Promise<User | undefined> => {\n    const result: User | TokenResponse | undefined = await client.switchOrganizationUnit(organizationUnitId, options);\n\n    // A redirect leaves the page; the callback refreshes the session then.\n    if (result) {\n      await updateSession();\n    }\n\n    return (result as User | undefined) ?? undefined;\n  };\n\n  const getCurrentOrganizationUnit: ThunderIDContextProps['getCurrentOrganizationUnit'] = useCallback(\n    async (): Promise<CurrentOrganizationUnit | null> => client.getCurrentOrganizationUnit(),\n    [client],\n  );\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  /**\n   * Re-reads `/users/me` into the session profile, so a change made outside the profile API, such as a\n   * recorded verification, shows. Like a profile update, the result replaces the profile; ID token\n   * claims are not merged back in, since they may hold a value the user has since changed.\n   */\n  const revalidateProfile = async (): Promise<void> => {\n    if (preferences?.user?.fetchUserProfile === false) return;\n\n    handleProfileUpdate(\n      await getUsersMe({\n        baseUrl,\n        instanceId,\n        url: resolveResourceEndpoint('usersMe', config),\n      }),\n    );\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getGrantedPermissions: () => Promise<string[]> = useCallback(\n    async (): Promise<string[]> => client.getGrantedPermissions(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(resolveRequestBaseUrl(reinitializedConfig) ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      currentOrganizationUnit,\n      currentProject,\n      getCurrentOrganizationUnit,\n      setCurrentProject,\n      switchOrganizationUnit,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getGrantedPermissions,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getGrantedPermissions,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n      currentOrganizationUnit,\n      currentProject,\n      getCurrentOrganizationUnit,\n      setCurrentProject,\n      switchOrganizationUnit,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile!}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n                revalidateProfile={revalidateProfile}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA4CA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uBAAsB,UAAU,OAAO;CAEvC,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA+B,cAAc,IAAIC,6BAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,cAAmC,cAAc,2BAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,oBAAyB,OAAY,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,uBAAe;CACjE,MAAM,CAAC,MAAM,WAAW,SAAsB,KAAK;CACnD,MAAM,CAAC,gBAAgB,qBAAqB,SAAkB,MAAM;CACpE,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,eAAe,oBAAoB,SAAkB,KAAK;CAEjE,MAAM,CAAC,aAAa,kBAAkB,SAA6B,KAAK;CACxE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,KAAK;CAC1F,MAAM,CAAC,yBAAyB,8BAA8B,SAAyC,KAAK;CAC5G,MAAM,EAAC,gBAAgB,sBAA0CC,+BAAuB,gBAAgB,OAAO,CAAC;CAEhH,MAAMC,iBAAyB,sBAAsB;EAAC,SAAS;EAAgB,WAAW,KAAK;EAAU,CAAC,IAAI;CAC9G,MAAM,CAAC,SAAS,cAAc,SAAiB,eAAe;CAC9D,MAAM,CAAC,QAAQ,aAAa,SAA+B;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA,SAAS,kBAAkB;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,WAAW,gBAAgB,SAA0C,KAAK;CAIjF,MAAMC,0BAA2D,OAA6B,KAAK;AAEnG,iBAAgB;AACd,aAAW,eAAe;IACzB,CAAC,eAAe,CAAC;AAEpB,iBAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,GAAG,sBAAsB,MAAM,OAAO,kBAAkB,CAAC,IAAI,GAAG;AAClF,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,SAAe,6BAA6B,aAAa;AAC/D,8BAA2B,qCAAqC,aAAwC,CAAC;GACzG,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,mBAAW;MACtC,SAAS;MACT,KAAK,wBAAwB,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,cAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,uBAAe;MACnC,SAAS;MACT,KAAK,wBAAwB,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,cAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,kBAAkB,6BAA6B,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,+BAA2B,KAAK;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,aAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,GAAG,gBAAgB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQ,SAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,iBAAgB;EACd,IAAIC;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,iBAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,iBAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAI,sBACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;CASxC,MAAME,yBAA0E,OAC9E,oBACA,YAC8B;EAC9B,MAAMC,SAA2C,MAAM,OAAO,uBAAuB,oBAAoB,QAAQ;AAGjH,MAAI,OACF,OAAM,eAAe;AAGvB,SAAQ,UAA+B;;CAGzC,MAAMC,6BAAkF,YACtF,YAAqD,OAAO,4BAA4B,EACxF,CAAC,OAAO,CACT;CAED,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;;;;;;CAQL,MAAM,oBAAoB,YAA2B;AACnD,MAAI,aAAa,MAAM,qBAAqB,MAAO;AAEnD,sBACE,MAAMb,mBAAW;GACf;GACA;GACA,KAAK,wBAAwB,WAAW,OAAO;GAChD,CAAC,CACH;;CAGH,MAAMc,oBAA4C,YAChD,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,aAAoC,YAAY,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,iBAAwC,YAC5C,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,wBAAiD,YACrD,YAA+B,OAAO,uBAAuB,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,oBAAgE,YAAY,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,aAA+C,YACnD,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,gBAAuD,YAC3D,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,SAA2C,YAC/C,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,eAAiD,YACrD,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,eAAoD,YACxD,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,sBAAsB,oBAAoB,IAAI,GAAG;AAC5D,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,QAAa,eACV;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ,gBAAgB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAgB;YAChC,oBAACC;GAAa,aAAa,aAAa;GAAM,QAAQ,gBAAgB,OAAO,OAAO;aAClF,oBAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,oBAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,oBAACC,kCACC,oBAACC;MACC,SAAS;MACG;MACZ,iBAAiB;MACE;gBAEnB,oBAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}

package/dist/contexts/ThunderID/useCurrentProjectState.d.ts

@@ -0,0 +1,26 @@
+import { Project } from '@thunderid/browser';
+/**
+ * The current project a provider exposes, and its setter.
+ */
+export interface CurrentProjectState {
+    /**
+     * The project the user chose for the management UI, or `null` when none is chosen.
+     */
+    currentProject: Project | null;
+    /**
+     * Chooses the current project, or clears it with `null`. The choice is kept per vendor in
+     * `localStorage`.
+     */
+    setCurrentProject: (project: Project | null) => void;
+}
+/**
+ * Holds the current project for a provider. It is a client-side preference: choosing a project does
+ * not sign in again, and tokens and permissions stay as they are. The stored choice is read after
+ * mount, so a server-rendered page and its first client render agree.
+ *
+ * @param vendor - The vendor prefix the choice is stored under.
+ * @returns The current project and its setter.
+ */
+declare const useCurrentProjectState: (vendor?: string) => CurrentProjectState;
+export default useCurrentProjectState;
+//# sourceMappingURL=useCurrentProjectState.d.ts.map

package/dist/contexts/ThunderID/useCurrentProjectState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentProjectState.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/useCurrentProjectState.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,EAA0C,MAAM,oBAAoB,CAAC;AAGpF;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B;;;OAGG;IACH,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;CACtD;AAED;;;;;;;GAOG;AACH,QAAA,MAAM,sBAAsB,GAAI,SAAS,MAAM,KAAG,mBAgBjD,CAAC;AAEF,eAAe,sBAAsB,CAAC"}

package/dist/contexts/ThunderID/useCurrentProjectState.js

@@ -0,0 +1,30 @@
+import { readCurrentProject, writeCurrentProject } from "@thunderid/browser";
+import { useCallback, useEffect, useState } from "react";
+
+//#region src/contexts/ThunderID/useCurrentProjectState.ts
+/**
+* Holds the current project for a provider. It is a client-side preference: choosing a project does
+* not sign in again, and tokens and permissions stay as they are. The stored choice is read after
+* mount, so a server-rendered page and its first client render agree.
+*
+* @param vendor - The vendor prefix the choice is stored under.
+* @returns The current project and its setter.
+*/
+const useCurrentProjectState = (vendor) => {
+	const [currentProject, setProject] = useState(null);
+	useEffect(() => {
+		setProject(readCurrentProject(vendor));
+	}, [vendor]);
+	return {
+		currentProject,
+		setCurrentProject: useCallback((project) => {
+			setProject(project);
+			writeCurrentProject(vendor, project);
+		}, [vendor])
+	};
+};
+var useCurrentProjectState_default = useCurrentProjectState;
+
+//#endregion
+export { useCurrentProjectState_default as default };
+//# sourceMappingURL=useCurrentProjectState.js.map

package/dist/contexts/ThunderID/useCurrentProjectState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentProjectState.js","names":[],"sources":["../../../src/contexts/ThunderID/useCurrentProjectState.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Project, readCurrentProject, writeCurrentProject} from '@thunderid/browser';\nimport {useCallback, useEffect, useState} from 'react';\n\n/**\n * The current project a provider exposes, and its setter.\n */\nexport interface CurrentProjectState {\n  /**\n   * The project the user chose for the management UI, or `null` when none is chosen.\n   */\n  currentProject: Project | null;\n  /**\n   * Chooses the current project, or clears it with `null`. The choice is kept per vendor in\n   * `localStorage`.\n   */\n  setCurrentProject: (project: Project | null) => void;\n}\n\n/**\n * Holds the current project for a provider. It is a client-side preference: choosing a project does\n * not sign in again, and tokens and permissions stay as they are. The stored choice is read after\n * mount, so a server-rendered page and its first client render agree.\n *\n * @param vendor - The vendor prefix the choice is stored under.\n * @returns The current project and its setter.\n */\nconst useCurrentProjectState = (vendor?: string): CurrentProjectState => {\n  const [currentProject, setProject] = useState<Project | null>(null);\n\n  useEffect(() => {\n    setProject(readCurrentProject(vendor));\n  }, [vendor]);\n\n  const setCurrentProject = useCallback(\n    (project: Project | null): void => {\n      setProject(project);\n      writeCurrentProject(vendor, project);\n    },\n    [vendor],\n  );\n\n  return {currentProject, setCurrentProject};\n};\n\nexport default useCurrentProjectState;\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,0BAA0B,WAAyC;CACvE,MAAM,CAAC,gBAAgB,cAAc,SAAyB,KAAK;AAEnE,iBAAgB;AACd,aAAW,mBAAmB,OAAO,CAAC;IACrC,CAAC,OAAO,CAAC;AAUZ,QAAO;EAAC;EAAgB,mBARE,aACvB,YAAkC;AACjC,cAAW,QAAQ;AACnB,uBAAoB,QAAQ,QAAQ;KAEtC,CAAC,OAAO,CACT;EAEyC;;AAG5C,qCAAe"}

package/dist/hooks/management/useManagementEndpoint.d.ts

@@ -13,7 +13,7 @@ export interface ManagementEndpoint {
 /**
  * The management collections an app can call through the SDK's API functions.
  */
-export type ManagementCollection = Extract<ResourceEndpointKey, 'agents' | 'agentTypes' | 'applications' | 'configurationVersions' | 'connections' | 'design' | 'export' | 'flows' | 'gateways' | 'groups' | 'i18n' | 'import' | 'notificationTemplates' | 'organizationUnits' | 'resourceServers' | 'roles' | 'secrets' | 'serverConfig' | 'users' | 'userTypes' | 'variables'>;
+export type ManagementCollection = Extract<ResourceEndpointKey, 'agents' | 'agentTypes' | 'applications' | 'authorizationDetailTypes' | 'clientRegistrations' | 'configurationVersions' | 'connections' | 'credentialConfigurations' | 'design' | 'export' | 'flows' | 'gateways' | 'groups' | 'i18n' | 'import' | 'notificationTemplates' | 'organizationUnits' | 'presentationDefinitions' | 'projects' | 'resourceServers' | 'roles' | 'secrets' | 'serverConfig' | 'users' | 'userTypes' | 'variables'>;
 /**
  * Resolves where a management resource collection lives, honoring the provider's `endpoints`
  * override so the management API can run on a different host from the authorization server.

package/dist/hooks/management/useManagementEndpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useManagementEndpoint.d.ts","sourceRoot":"","sources":["../../../src/hooks/management/useManagementEndpoint.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,mBAAmB,EAA0B,MAAM,oBAAoB,CAAC;AAGhF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;;OAGG;IACH,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,CACxC,mBAAmB,EACjB,QAAQ,GACR,YAAY,GACZ,cAAc,GACd,uBAAuB,GACvB,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,UAAU,GACV,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,uBAAuB,GACvB,mBAAmB,GACnB,iBAAiB,GACjB,OAAO,GACP,SAAS,GACT,cAAc,GACd,OAAO,GACP,WAAW,GACX,WAAW,CACd,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,qBAAqB,GAAI,KAAK,oBAAoB,KAAG,kBAI1D,CAAC;AAEF,eAAe,qBAAqB,CAAC"}
+{"version":3,"file":"useManagementEndpoint.d.ts","sourceRoot":"","sources":["../../../src/hooks/management/useManagementEndpoint.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,mBAAmB,EAA0B,MAAM,oBAAoB,CAAC;AAGhF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;;OAGG;IACH,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,CACxC,mBAAmB,EACjB,QAAQ,GACR,YAAY,GACZ,cAAc,GACd,0BAA0B,GAC1B,qBAAqB,GACrB,uBAAuB,GACvB,aAAa,GACb,0BAA0B,GAC1B,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,UAAU,GACV,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,uBAAuB,GACvB,mBAAmB,GACnB,yBAAyB,GACzB,UAAU,GACV,iBAAiB,GACjB,OAAO,GACP,SAAS,GACT,cAAc,GACd,OAAO,GACP,WAAW,GACX,WAAW,CACd,CAAC;AAEF;;;;;;GAMG;AACH,QAAA,MAAM,qBAAqB,GAAI,KAAK,oBAAoB,KAAG,kBAI1D,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/hooks/management/useManagementEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"useManagementEndpoint.js","names":["useThunderID"],"sources":["../../../src/hooks/management/useManagementEndpoint.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceEndpointKey, resolveResourceEndpoint} from '@thunderid/browser';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The URL inputs a management API function needs.\n */\nexport interface ManagementEndpoint {\n  baseUrl: string | undefined;\n  /**\n   * The collection URL from `endpoints` when overridden, otherwise `undefined` so the API function\n   * falls back to `{baseUrl}/{collection}`.\n   */\n  url: string | undefined;\n}\n\n/**\n * The management collections an app can call through the SDK's API functions.\n */\nexport type ManagementCollection = Extract<\n  ResourceEndpointKey,\n  | 'agents'\n  | 'agentTypes'\n  | 'applications'\n  | 'configurationVersions'\n  | 'connections'\n  | 'design'\n  | 'export'\n  | 'flows'\n  | 'gateways'\n  | 'groups'\n  | 'i18n'\n  | 'import'\n  | 'notificationTemplates'\n  | 'organizationUnits'\n  | 'resourceServers'\n  | 'roles'\n  | 'secrets'\n  | 'serverConfig'\n  | 'users'\n  | 'userTypes'\n  | 'variables'\n>;\n\n/**\n * Resolves where a management resource collection lives, honoring the provider's `endpoints`\n * override so the management API can run on a different host from the authorization server.\n *\n * @param key - The resource collection.\n * @returns The base URL and optional collection URL override.\n */\nconst useManagementEndpoint = (key: ManagementCollection): ManagementEndpoint => {\n  const {baseUrl, endpoints} = useThunderID();\n\n  return {baseUrl, url: resolveResourceEndpoint(key, {endpoints})};\n};\n\nexport default useManagementEndpoint;\n"],"mappings":";;;;;;;;;;;AAqDA,MAAM,yBAAyB,QAAkD;CAC/E,MAAM,EAAC,SAAS,cAAaA,sBAAc;AAE3C,QAAO;EAAC;EAAS,KAAK,wBAAwB,KAAK,EAAC,WAAU,CAAC;EAAC;;AAGlE,oCAAe"}
+{"version":3,"file":"useManagementEndpoint.js","names":["useThunderID"],"sources":["../../../src/hooks/management/useManagementEndpoint.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceEndpointKey, resolveResourceEndpoint} from '@thunderid/browser';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The URL inputs a management API function needs.\n */\nexport interface ManagementEndpoint {\n  baseUrl: string | undefined;\n  /**\n   * The collection URL from `endpoints` when overridden, otherwise `undefined` so the API function\n   * falls back to `{baseUrl}/{collection}`.\n   */\n  url: string | undefined;\n}\n\n/**\n * The management collections an app can call through the SDK's API functions.\n */\nexport type ManagementCollection = Extract<\n  ResourceEndpointKey,\n  | 'agents'\n  | 'agentTypes'\n  | 'applications'\n  | 'authorizationDetailTypes'\n  | 'clientRegistrations'\n  | 'configurationVersions'\n  | 'connections'\n  | 'credentialConfigurations'\n  | 'design'\n  | 'export'\n  | 'flows'\n  | 'gateways'\n  | 'groups'\n  | 'i18n'\n  | 'import'\n  | 'notificationTemplates'\n  | 'organizationUnits'\n  | 'presentationDefinitions'\n  | 'projects'\n  | 'resourceServers'\n  | 'roles'\n  | 'secrets'\n  | 'serverConfig'\n  | 'users'\n  | 'userTypes'\n  | 'variables'\n>;\n\n/**\n * Resolves where a management resource collection lives, honoring the provider's `endpoints`\n * override so the management API can run on a different host from the authorization server.\n *\n * @param key - The resource collection.\n * @returns The base URL and optional collection URL override.\n */\nconst useManagementEndpoint = (key: ManagementCollection): ManagementEndpoint => {\n  const {baseUrl, endpoints} = useThunderID();\n\n  return {baseUrl, url: resolveResourceEndpoint(key, {endpoints})};\n};\n\nexport default useManagementEndpoint;\n"],"mappings":";;;;;;;;;;;AA0DA,MAAM,yBAAyB,QAAkD;CAC/E,MAAM,EAAC,SAAS,cAAaA,sBAAc;AAE3C,QAAO;EAAC;EAAS,KAAK,wBAAwB,KAAK,EAAC,WAAU,CAAC;EAAC;;AAGlE,oCAAe"}